Figure REF  plots the attacker's effectiveness for two additional
datasets, Madelon, an artificial dataset constructed as part of a NIPS
2003 challenge ([1]}), and Parkinson, a dataset of
sound recordings from 20 Parkinson's Disease patients and 20 healthy subjects
([2]}). Tables REF  reports zero-one losses
and the proportion of variance explained.
<FIGURE><FIGURE><TABLE>